SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Strategies & Market Trends : Paint The Table -- Ignore unavailable to you. Want to Upgrade?


To: Oral Roberts who wrote (14590)2/14/2002 8:37:24 AM
From: Augustus Gloop  Read Replies (2) | Respond to of 23786
 
Damn lets get it right guys!



Thursday February 14, 7:52 am Eastern Time
Microsoft Security Patch Said Ineffective


NEW YORK (Reuters) - A Microsoft Corp. (NasdaqNM:MSFT - news) program designed to plug a common security hole is vulnerable to the very attack it was designed to prevent, the Wall Street Journal alleged in a report on Thursday, citing a prominent security consulting firm.

Last month Microsoft Chairman Bill Gates announced a company-wide initiative to improve the security features of its products.

Microsoft on Wednesday unveiled a collection of programming tools, including a new version of a special-purpose program that it modified to try to prevent a common hacker attack called buffer overflows, the Journal said.

Researchers at Cigital, of Dulles, Va., found that Microsoft apparently adopted a technique that has been used with the Linux operating system and shown to be vulnerable to attack, the Journal said.

As a result, the program, called Visual C++.NET, could lead programmers to write even more programs that are vulnerable to buffer-overflow attacks, the Journal alleged.

Microsoft was not immediately available to comment